ZyXEL Communications ZyWALL 310 - IP;MAC Binding; 27.1 IP;MAC Binding Overview; 27.2 IP;MAC Binding Commands

ZyWALL Series CLI Reference Guide
217
CHAPTER 27
IP/MAC Binding
27.1 IP/MAC Binding Overview
IP address to MAC address binding helps ensure that only the intended devices get to use privileged IP
addresses. The Zyxel Device uses DHCP to assign IP addresses and records to MAC address it assigned
each IP address. The Zyxel Device then checks incoming connection attempts against this list. A user
cannot manually assign another IP to his computer and use it to connect to the Zyxel Device.
Suppose you configure access privileges for IP address 192.168.1.27 and use static DHCP to assign it to
Tim’s computer’s MAC address of 12:34:56:78:90:AB. IP/MAC binding drops traffic from any computer
with another MAC address that tries to use IP address 192.168.1.27.
27.2 IP/MAC Binding Commands
The following table lists the ip-mac-binding commands. You must use the configure terminal
command to enter the configuration mode before you can use these commands.
Table 109 ip-mac-binding Commands
COMMAND DESCRIPTION
[no] ip ip-mac-binding interface_name
activate
Turns on IP/MAC binding for the specified interface. The no command turns IP/
MAC binding off for the specified interface.
[no] ip ip-mac-binding interface_name
log
Turns on the IP/MAC binding logs for the specified interface. The
no command
turns IP/MAC binding logs off for the specified interface.
ip ip-mac-binding exempt name start-ip
end-ip
Adds a named IP range as being exempt from IP/MAC binding.
no ip ip-mac-binding exempt name Deletes the named IP range from the list of addresses that are exempt from IP/
MAC binding.
show ip ip-mac-binding interface_name Shows whether IP/MAC binding is enabled or disabled for the specified
interface.
show ip ip-mac-binding all Shows whether IP/MAC binding is enabled or disabled for all interfaces.
show ip ip-mac-binding status
interface_name
Displays the current IP/MAC bindings for the specified interface.
show ip ip-mac-binding status all Displays the current IP/MAC bindings for all interfaces.
show ip ip-mac-binding exempt Shows the current IP/MAC binding exempt list.
ip ip-mac-binding clear-drop-count
interface_name
Resets the packet drop counter for the specified interface.